[Ilugc] Restricting Access

Pushparajan V vprajan at gmail.com
Wed Jun 21 19:13:30 IST 2006


hi,
Is my guess right?. "there is no GUI or CUI tool for locking apps and files
still now in linux." If it is not there, then why not a GNU/Linux tool for
doing this work ?.. If it is created, it would be more helpful for novice
user.

Thanks

On 6/21/06, Binand Sethumadhavan <binand at gmail.com> wrote:
>
> On 21/06/06, Pranavam S <pranavam.s at gmail.com> wrote:
> > 1. There are some applications which are common to all users like
> > XMMS, Amarok, etc.  I have separate users for every persons who access
> > my system, but i want to know how could i restrict those applications
> > from selected users. say i have three users
>
> The easiest (and reasonably secure) way to do this is to recompile
> bash with the --enable-restricted configure option, and then set the
> shell for these users as rbash. Once you have that, do:
>
> a. Create a directory, say /usr/local/allowed-apps
> b. Symlink all the programs you want to allow your users to access,
> from this directory: ln -s /usr/bin/xmms /usr/local/allowed-apps
> c. Add all the users you want to have restricted access to say, a new
> group: groupadd restricted; usermod -G restricted username. Change
> their shell to rbash (usermod -s /bin/rbash username)
> d. Add a small script in /etc/profile.d which will check if a user is
> in your restricted group, and if yes, does something like:
> PATH=/usr/local/allowed-apps; export PATH
>
> > 2.  I have a desktop pc with P1 processor and 64 mb ram, i need to
> > connect that system to my SUSE along with remote access to XServer.
>
> How about a liveCD?
>
> Binand
> _______________________________________________
> To unsubscribe, email ilugc-request at ae.iitm.ac.in with
> "unsubscribe <password> <address>"
> in the subject or body of the message.
> http://www.ae.iitm.ac.in/mailman/listinfo/ilugc
>



-- 
"Life is very short.
What is the need for living for ourselves?
Lets live for others.
Our life will be longer than we believe :-)"

Rajan VP


More information about the ilugc mailing list